on this note, what's a good subdomain for doing SSO? would you prefer account.company.com or auth.company.com or something else?